@dbx-app/mcp-server 0.4.26 → 0.4.28

package/dist/index.d.ts

@@ -2,7 +2,7 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { type Backend } from "@dbx-app/node-core";
 export declare const DBX_MCP_PACKAGE_VERSION: string;
-export declare const DBX_CONNECTION_TYPE_DESCRIPTION = "Database type: postgres, mysql, sqlite, rqlite, redis, duckdb, clickhouse, sqlserver, mongodb, oracle, elasticsearch, etcd, doris, starrocks, manticoresearch, milvus, qdrant, weaviate, chromadb, redshift, dameng, kingbase, highgo, vastbase, goldendb, databend, gaussdb, kwdb, yashandb, databricks, saphana, teradata, vertica, firebird, exasol, opengauss, oceanbase-oracle, questdb, gbase, h2, snowflake, trino, prestosql, hive, spark, db2, informix, influxdb, iris, neo4j, cassandra, bigquery, kylin, sundb, oscar, tdengine, iotdb, xugu, zookeeper, jdbc, access, mq";
+export declare const DBX_CONNECTION_TYPE_DESCRIPTION = "Database type: postgres, mysql, sqlite, rqlite, cloudflare-d1, redis, duckdb, clickhouse, sqlserver, mongodb, oracle, elasticsearch, etcd, doris, starrocks, manticoresearch, milvus, qdrant, weaviate, chromadb, redshift, dameng, kingbase, highgo, vastbase, goldendb, databend, gaussdb, kwdb, yashandb, databricks, saphana, teradata, vertica, firebird, exasol, opengauss, oceanbase-oracle, questdb, gbase, h2, snowflake, trino, prestosql, hive, spark, db2, informix, influxdb, iris, neo4j, cassandra, bigquery, kylin, sundb, oscar, tdengine, iotdb, xugu, zookeeper, jdbc, access, mq";
 export declare function createDbxMcpServer(backend: Backend, options?: {
     isWebMode?: boolean;
 }): McpServer;

package/dist/index.js

@@ -3,7 +3,7 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { createRequire } from "node:module";
 import { z } from "zod";
-import { buildSchemaContext, createBackend, evaluateRedisCommandSafety, evaluateMongoAggregateSafety, evaluateSqlSafety, formatCell, formatSchemaContext, isMainModule, mdTable, notifyReload, parseMongoAggregateCommand, postBridge, sqlSafetyFromEnv, splitSqlStatements, } from "@dbx-app/node-core";
+import { buildSchemaContext, createBackend, evaluateRedisCommandSafety, evaluateMongoAggregateSafety, evaluateSqlSafety, formatCell, formatSchemaContext, isMainModule, mdTable, notifyReload, parseMongoAggregateCommand, assessProductionSql, isLikelyMongoMutation, isProductionDatabase, postBridge, sqlSafetyFromEnv, splitSqlStatements, } from "@dbx-app/node-core";
 const require = createRequire(import.meta.url);
 const packageJson = require("../package.json");
 export const DBX_MCP_PACKAGE_VERSION = packageJson.version ?? "0.0.0";
@@ -57,7 +57,7 @@ function formatRedisCommandValue(value) {
 function formatRedisCommandToolResult(result) {
     return text(`Command: ${result.command}\nSafety: ${result.safety}\n\n${formatRedisCommandValue(result.value)}`);
 }
-export const DBX_CONNECTION_TYPE_DESCRIPTION = "Database type: postgres, mysql, sqlite, rqlite, redis, duckdb, clickhouse, sqlserver, mongodb, oracle, elasticsearch, etcd, doris, starrocks, manticoresearch, milvus, qdrant, weaviate, chromadb, redshift, dameng, kingbase, highgo, vastbase, goldendb, databend, gaussdb, kwdb, yashandb, databricks, saphana, teradata, vertica, firebird, exasol, opengauss, oceanbase-oracle, questdb, gbase, h2, snowflake, trino, prestosql, hive, spark, db2, informix, influxdb, iris, neo4j, cassandra, bigquery, kylin, sundb, oscar, tdengine, iotdb, xugu, zookeeper, jdbc, access, mq";
+export const DBX_CONNECTION_TYPE_DESCRIPTION = "Database type: postgres, mysql, sqlite, rqlite, cloudflare-d1, redis, duckdb, clickhouse, sqlserver, mongodb, oracle, elasticsearch, etcd, doris, starrocks, manticoresearch, milvus, qdrant, weaviate, chromadb, redshift, dameng, kingbase, highgo, vastbase, goldendb, databend, gaussdb, kwdb, yashandb, databricks, saphana, teradata, vertica, firebird, exasol, opengauss, oceanbase-oracle, questdb, gbase, h2, snowflake, trino, prestosql, hive, spark, db2, informix, influxdb, iris, neo4j, cassandra, bigquery, kylin, sundb, oscar, tdengine, iotdb, xugu, zookeeper, jdbc, access, mq";
 const FILE_CAPABLE_CONNECTION_TYPES = new Set(["sqlite", "duckdb", "access", "h2"]);
 function scopedValue(value) {
     const trimmed = value?.trim();
@@ -185,6 +185,13 @@ export function createDbxMcpServer(backend, options = {}) {
             const safety = evaluateSqlSafety(sql, { ...sqlSafetyFromEnv(), allowMultipleStatements: true });
             if (!safety.allowed)
                 return toolError("SQL_BLOCKED", safety.reason ?? "SQL blocked.");
+            const production = assessProductionSql(sql, scopedConfig, database ?? scope.database ?? scopedConfig.database);
+            if (production.active && production.isMutation) {
+                return toolError("PRODUCTION_WRITE_BLOCKED", "MCP cannot execute writes against a production database. Return the SQL for a user to review and run in DBX.");
+            }
+        }
+        else if (isProductionDatabase(scopedConfig, database ?? scope.database ?? scopedConfig.database) && isLikelyMongoMutation(sql)) {
+            return toolError("PRODUCTION_WRITE_BLOCKED", "MCP cannot execute writes against a production database. Return the command for a user to review and run in DBX.");
         }
         // MongoDB shell commands don't fit the SQL safety evaluator; the backend
         // (node-core executeQuery) applies command-aware read/write gating.
@@ -222,6 +229,9 @@ export function createDbxMcpServer(backend, options = {}) {
         const safety = evaluateRedisCommandSafety(command, sqlSafetyFromEnv());
         if (!safety.allowed)
             return toolError("REDIS_COMMAND_BLOCKED", safety.reason ?? "Redis command blocked.");
+        if (isProductionDatabase(scopedConfig, String(defaultRedisDb(scopedConfig, scope, db))) && safety.safety !== "allowed") {
+            return toolError("PRODUCTION_WRITE_BLOCKED", "MCP cannot execute write or dangerous Redis commands against a production database.");
+        }
         try {
             const result = await backend.executeRedisCommand(scopedConfig, defaultRedisDb(scopedConfig, scope, db), command, {
                 skipSafetyCheck: safety.skipSafetyCheck,
@@ -258,11 +268,11 @@ export function createDbxMcpServer(backend, options = {}) {
         server.tool("dbx_add_connection", "Add a new database connection to DBX", {
             name: z.string().describe("Connection name"),
             db_type: z.string().describe(DBX_CONNECTION_TYPE_DESCRIPTION),
-            host: z.string().describe("Database host"),
+            host: z.string().describe("Database host; for cloudflare-d1, use the Cloudflare Account ID"),
             port: z.number().optional().describe("Database port (TDengine defaults to 6041, IoTDB defaults to 6667, XuguDB defaults to 5138)"),
             username: z.string().default("").describe("Username"),
-            password: z.string().default("").describe("Password"),
-            database: z.string().optional().describe("Default database name"),
+            password: z.string().default("").describe("Password; for cloudflare-d1, use the API Token"),
+            database: z.string().optional().describe("Default database name; for cloudflare-d1, use the D1 Database ID"),
             ssl: z.boolean().default(false).describe("Enable SSL"),
             driver_profile: z.string().optional().describe("Driver profile (e.g. 'gbase8a', 'gbase8s')"),
         }, async ({ name, db_type, host, port, username, password, database, ssl, driver_profile }) => {
@@ -272,6 +282,7 @@ export function createDbxMcpServer(backend, options = {}) {
             const DEFAULT_PORTS = {
                 kwdb: 26257,
                 rqlite: 4001,
+                "cloudflare-d1": 443,
                 tdengine: 6041,
                 oscar: 2003,
                 iotdb: 6667,
@@ -406,6 +417,17 @@ export function createDbxMcpServer(backend, options = {}) {
                 if (!safety.allowed)
                     return toolError("SQL_BLOCKED", safety.reason ?? "SQL blocked.");
             }
+            if (config?.db_type === "mongodb") {
+                if (isProductionDatabase(config, database ?? scope.database ?? config.database) && isLikelyMongoMutation(sql)) {
+                    return toolError("PRODUCTION_WRITE_BLOCKED", "MCP cannot send writes against a production database to DBX.");
+                }
+            }
+            else {
+                const production = assessProductionSql(sql, config, database ?? scope.database ?? config.database);
+                if (production.active && production.isMutation) {
+                    return toolError("PRODUCTION_WRITE_BLOCKED", "MCP cannot send writes against a production database to DBX.");
+                }
+            }
             // MongoDB shell commands bypass the SQL safety evaluator; pass MCP
             // safety flags to the desktop executor for command-aware gating.
             return bridgeRequest("/execute-query", {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dbx-app/mcp-server",
-  "version": "0.4.26",
+  "version": "0.4.28",
   "description": "MCP server for DBX — query databases from Claude Code, Cursor, and other AI agents",
   "keywords": [
     "ai-agent",
@@ -30,7 +30,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.1",
     "zod": "^3.25.20",
-    "@dbx-app/node-core": "^0.4.26"
+    "@dbx-app/node-core": "^0.4.28"
   },
   "devDependencies": {
     "@types/node": "^22.15.21",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/t8y2/dbx",
     "source": "github"
   },
-  "version": "0.4.26",
+  "version": "0.4.28",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@dbx-app/mcp-server",
-      "version": "0.4.26",
+      "version": "0.4.28",
       "transport": {
         "type": "stdio"
       }